<?xml version="1.0"?>
<!DOCTYPE foo [
   <!ENTITY external_info SYSTEM "javascript:alert(307);">
]>
<foo>
   Test #307.
   &external_info;
</foo>
